Skip to content

Commit

Permalink
docs: Add troubleshooting option for openid-connect
Browse files Browse the repository at this point in the history
This solved my issue when nothing else did.

Signed-off-by: Yarden Shoham <[email protected]>
  • Loading branch information
yardenshoham committed Jan 6, 2025
1 parent d4d99e7 commit 47cd61d
Showing 1 changed file with 15 additions and 0 deletions.
15 changes: 15 additions & 0 deletions docs/en/latest/plugins/openid-connect.md
Original file line number Diff line number Diff line change
Expand Up @@ -275,6 +275,21 @@ upstream sent too big header while reading response header from upstream

If so, try adjusting `proxy_buffers`, `proxy_buffer_size`, and `proxy_busy_buffers_size` to larger values.

Another option is to set the `session_content` attribute:

```yaml
openid-connect:
...
bearer_only: false
# this comes from https://github.com/zmartzone/lua-resty-openidc, if this is missing, all information will be stored in the session. This
# causes the cookies to be too large and the request to fail. We have control over id_token, user, enc_id_token, and access_token.
# We currently include only access_token in the session. If this gets too big we can remove it as well.
session_contents:
access_token: true
session:
secret: "NTgzZWY1MzAtOTcyNi00MzA5LWI1MjItNjFhMzI2NzRkZWQxCg==" # used `uuidgen|base64` to generate this secret
```
#### 5. Invalid Client Secret
Verify if `client_secret` is valid and correct. An invalid `client_secret` would lead to an authentication failure and no token shall be returned and stored in session.

0 comments on commit 47cd61d

Please sign in to comment.